The Vulnpocalypse Report

The security industry keeps predicting that AI will supercharge vulnerability exploitation. We went looking for the evidence. We traced every confirmed in-the-wild exploitation of a published CVE from January 1, 2018 through July 15, 2026 (all 3,769 of them) and measured how much adversary behavior has actually changed. Submit your details below, and we will send the report directly to your inbox.